This sample is a 12 MB PE Executable identified by Malva.RE as Go Loader (Factory-v3) (stealer loader). Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1055. Static analysis cannot prove a file is harmless: an unknown or heavily packed threat can go undetected. The file was parsed and decompiled, never executed.
- SHA256
- e7b0a4920746a2ef0adcf468d01c1cb2c888a47140e775b49151eba1c39bd0c6
- MD5
- d6e7e512dabc56312f6a6ed86ca1b8eb
- Verdict
- No known threat found
- File type
- PE Executable · 12 MB
- Family
- Go Loader (Factory-v3)
- Category
- Stealer Loader
Cite this report: https://app.malva.re/sha256/e7b0a4920746a2ef0adcf468d01c1cb2c888a47140e775b49151eba1c39bd0c6
Related Go Loader (Factory-v3) samples
- 33b9b3be59ca61a107660c8856e05b9eb1126cd8ed10baef9fe64c11eb0b4180 2026-11-03
- ad9a979e68a411ca15f5d003c37ada725d02c34d6c1b7f34c4dbbbed39a8dd4f 2026-11-02
- 0da518a8446bf832d527a9859d96753b6740f9ae1991e0ca72c928f3fc46dec7 2026-11-02
- cb2e73ac6ae49335bf6263c8a8a99ca5abfa6a8a8cdd4d6d29e6ebd78271fa83 2026-11-02
- 8fe7d9550b62b75da6fb8f2c1a3289f355991650252b8ed1be19ca88fb697935 2026-11-02
- 04f5fb7c6ca948f1d0af5791d2b11aa7630c3b5159c94b1ecf68859cf2d91c47 2026-11-02
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
pe:exe~T1027~T1055>bin
pe:exe>bin
| Name | Value |
|---|---|
| Attribution | |
| Info | Overlay extracted: Overlay_65ff396f.bin (185 bytes) |